Senior Director, Security Operations Center

CFA Institute•Charlottesville, VA

13d•$190,000 - $230,000

About The Position

CFA Institute is seeking a hands-on, outcomes-driven Senior Director to lead our global Security Operations Center (SOC). In this role, you will set the strategic vision for detection and response, build and mentor a high-performing global team, and ensure resilient, real-time defense of our systems, data, and infrastructure. If you thrive on leading from the front—rolling up your sleeves to solve complex incidents while coaching others to excellence—this is your opportunity to make a global impact at scale. Please note: CFA Institute does not provide work authorization or visa sponsorship for this position (including student or temporary worker visas).

Requirements

Bachelor’s degree in cybersecurity, computer science, information technology, or related field.
10–15+ years in cybersecurity operations with 5+ years leading SOC/IR teams.
Proven expertise in SOC management, incident response, digital forensics, and enterprise monitoring.
Demonstrated command of security frameworks and methodologies (e.g. NIST , MITRE ATT&CK ).
Excellent judgment under pressure with strong analytical, problem-solving, and decision-making skills.
Inclusive people leader: coaches, mentors, and builds high-performing, diverse teams across time zones.
Exceptional communication skills for both technical and non-technical audiences.
Willingness to operate as a hands-on leader.

Nice To Haves

Professional certifications such as CISSP , CISM , CEH , or equivalent.
Experience orchestrating complex, cross-functional incident responses and executive-level briefings.
Background establishing SOC metrics, SLAs/SLOs, and reporting aligned to business risk.
Track record implementing automation, threat intelligence fusion, and continuous improvement programs.

Responsibilities

Set the SOC strategy: Define and execute a multi-year roadmap aligned to business goals; measure and report outcomes.
Lead a global team: Manage, mentor, and grow security analysts, engineers, and incident responders to deliver 24x7 capabilities.
Own detection & response: Oversee continuous monitoring of networks, systems, and applications; triage, contain, eradicate, and recover from threats in real time.
Mature incident readiness: Develop, maintain, and drill IR plans, playbooks, and runbooks; coordinate cross-functional war rooms.
Elevate resilience: Drive threat hunting, digital forensics, and post-incident reviews to strengthen controls and reduce MTTD/MTTR.
Assure compliance & risk management: Align practices to global regulations and frameworks; partner with stakeholders to assess risk and implement mitigations.
Continuously improve: Lead vulnerability assessments and pen tests; track remediation to closure.
Innovate the stack: Evaluate and adopt modern tooling, automation, and intelligence sources (e.g. MITRE ATT&CK–mapped detections) to stay ahead of adversaries.
Executive communication: Translate technical risk into business terms and present clear updates to senior leadership and the board as needed.